#!/bin/sh
# Run Claude Code unattended inside the externally isolated Hermes agent pod.
set -eu
umask 077

config_dir="${CLAUDE_CONFIG_DIR:-/runtime-access/claude}"
oauth_token_file="${CLAUDE_CODE_OAUTH_TOKEN_FILE:-/claude-oauth-access/token}"
if [ -s "$oauth_token_file" ]; then
  CLAUDE_CODE_OAUTH_TOKEN="$(tr -d '\r\n' < "$oauth_token_file")"
  export CLAUDE_CODE_OAUTH_TOKEN
fi

exec /opt/data/tools/bin/claude \
  --dangerously-skip-permissions \
  --autocompact auto \
  --settings "$config_dir/settings.json" \
  "$@"